changed from jade to ejs to match authentication